7.5
CVE-2016-10042
- EPSS 0.95%
- Veröffentlicht 29.06.2017 00:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Erkennungen
LoginAuthorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticated HTTP request, leading to denial of service and information disclosure.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Arcadyan ≫ Swisscom Internet-box Firmware Version -
Arcadyan ≫ Swisscom Internet-box Version - SwEdition light
Arcadyan ≫ Swisscom Internet-box Version - SwEdition plus
Arcadyan ≫ Swisscom Internet-box Version - SwEdition standard
Arcadyan ≫ Swisscom Internet-box Version - SwEdition plus
Arcadyan ≫ Swisscom Internet-box Version - SwEdition standard
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.95% | 0.566 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
https://www.swisscom.ch/content/dam/swisscom/de/about/nachhaltigkeit/digitale-schweiz/sicherheit/bug-bounty/files/cve-2016-10042.txt